diff --git a/utils/utils.go b/utils/utils.go
index 733680d542b52835780ae1890c2a6ab3e35f3a8b..76bcff8b3fc4e26b43ea302281fddff606008561 100644
--- a/utils/utils.go
+++ b/utils/utils.go
@@ -33,7 +33,7 @@ func CorsHeaders() map[string]string {
 	return map[string]string{
 		"Access-Control-Allow-Origin": "*",
 		// do not wildcard: https://stackoverflow.com/questions/13146892/cors-access-control-allow-headers-wildcard-being-ignored
-		"Access-Control-Allow-Headers":     "authorization, content-type, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, user-agent, x-amz-date, x-amz-security-token",
+		"Access-Control-Allow-Headers":     "authorization, content-type, referer, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-platform, user-agent, x-amz-date, x-amz-security-token, x-df",
 		"Access-Control-Allow-Methods":     "OPTIONS,GET,PUT,POST,DELETE,PATCH,HEAD",
 		"Access-Control-Max-Age":           "86400",
 		"Access-Control-Allow-Credentials": "true",